Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/1930A6C2DE1411EA9309134EC4F9AE02.roa
File:                     1930A6C2DE1411EA9309134EC4F9AE02.roa (raw, json)
Hash identifier:          3wvmSVm24Be4PT+QoB6fmiVi8khIAb17IJdvXSMd/Sk=
Subject key identifier:   5F:E9:A3:08:95:4A:EC:24:EB:BE:B8:E0:29:88:78:A0:FB:E0:65:15
Certificate issuer:       /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
Certificate serial:       11A8
Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/1930A6C2DE1411EA9309134EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:04:27 +0000
ROA not before:           Tue 02 Dec 2025 18:49:51 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     64049
IP address blocks:        49.45.4.0/24 maxlen: 24
                          49.45.5.0/24 maxlen: 24
                          2405:200:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl
                          rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4520 (0x11a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
        Validity
            Not Before: Dec  2 18:49:51 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a48dba-77cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:44:8f:4d:12:9b:2a:1f:f3:02:f6:00:5a:
                    02:b8:ef:c3:8b:97:ff:5b:0e:29:0d:a2:22:b4:ac:
                    ae:a1:06:07:fb:c2:5b:6a:e3:35:3c:d0:d9:0c:88:
                    32:67:f0:a0:45:6e:40:79:f2:5d:66:d7:4d:7d:f3:
                    6c:bf:ea:ee:97:ac:0d:36:5c:57:a5:e5:0a:4b:39:
                    96:5b:b4:9d:9f:7f:f5:cb:5f:65:23:94:29:26:0a:
                    eb:ff:96:d3:d9:15:8f:c3:d4:0d:bf:4f:d8:64:43:
                    f3:9a:07:77:55:a8:54:5d:0c:1e:68:1d:71:13:da:
                    b3:11:70:e7:e2:4f:58:7b:e1:7a:c3:a6:da:17:cd:
                    3e:aa:45:3a:e7:77:b3:5f:b4:87:6d:8c:a7:8e:81:
                    e4:99:4c:aa:41:5c:dc:3f:12:a0:7a:aa:a6:e3:6b:
                    a7:78:d2:a8:e7:c4:2f:a4:20:57:b4:78:b9:db:fd:
                    01:7f:b5:a0:00:9e:d9:48:ad:16:52:1a:48:5f:e0:
                    27:96:03:18:0f:10:7b:11:f1:5e:6d:bf:40:80:1e:
                    c1:a8:0a:ef:22:c7:01:19:99:74:52:f2:3b:9e:f8:
                    12:ea:c6:8e:af:03:ba:52:c5:36:2a:06:ba:07:e2:
                    ce:85:47:20:cf:72:56:ee:d8:b2:a8:96:fd:25:a9:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E9:A3:08:95:4A:EC:24:EB:BE:B8:E0:29:88:78:A0:FB:E0:65:15
            X509v3 Authority Key Identifier:
                keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/1930A6C2DE1411EA9309134EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.45.4.0/23
                IPv6:
                  2405:200:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:65:96:19:35:ea:15:22:47:8b:0f:f1:ae:f7:ff:3e:28:de:
         16:6f:53:53:a3:73:d7:b0:23:4d:79:b3:8b:6e:d7:d4:fe:e6:
         29:20:3e:a9:5e:fd:b5:e5:c1:de:64:b3:31:b3:f7:23:23:5d:
         33:c4:99:0b:ce:d2:63:d9:f3:e2:77:99:ec:a7:4a:7a:74:37:
         e2:e7:4a:af:83:1f:ae:f3:4e:28:cd:97:73:e4:b6:31:db:3d:
         c9:fe:f5:15:b2:6f:05:cc:92:f1:83:ac:60:e7:5b:36:6f:76:
         b0:27:7f:d2:0b:df:47:22:5a:df:41:f8:1c:9b:05:cf:83:49:
         f3:d8:9f:6f:69:00:be:c4:a1:c9:1a:6d:9b:ba:38:17:27:11:
         3e:f0:26:58:2b:18:18:36:d6:83:5f:88:6a:f9:82:53:08:e8:
         8a:43:42:e4:11:9a:0b:af:07:93:8c:19:e8:ac:27:db:d1:7a:
         1d:d3:b9:e7:f7:6e:66:83:27:18:92:99:f9:b3:61:11:87:fe:
         75:91:bd:ec:3c:66:5d:a6:85:67:41:e8:d4:c0:78:0a:68:fd:
         57:84:0f:27:77:ac:af:c2:eb:27:28:d4:c2:91:c7:3a:45:61:
         48:64:37:81:d7:aa:78:0f:a3:87:cd:87:40:47:8d:2e:fe:d2:
         67:62:9f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:26 2026 by rpki-client